Searched hist:"10528 b9c45cfb9e8f45217ef2f5ef8b876bbd3f5" (Results 1 – 1 of 1) sorted by relevance
| /linux/arch/powerpc/net/ |
| H A D | bpf_jit_comp64.c | diff 10528b9c45cfb9e8f45217ef2f5ef8b876bbd3f5 Fri Jan 13 18:10:01 CET 2017 Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com> powerpc/bpf: Flush the entire JIT buffer
With bpf_jit_binary_alloc(), we allocate at a page granularity and fill
the rest of the space with illegal instructions to mitigate BPF spraying
attacks, while having the actual JIT'ed BPF program at a random location
within the allocated space. Under this scenario, it would be better to
flush the entire allocated buffer rather than just the part containing
the actual program. We already flush the buffer from start to the end of
the BPF program. Extend this to include the illegal instructions after
the BPF program.
Signed-off-by: Naveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
Acked-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
|